According to the statements issued by the CNIL, both Google and Amazon store tracking cookies on the computers of their visitors just by visiting the website. This storage was done in an unannounced way.
These violations have been judged serious enough to require Amazon to pay 35 million euros. Google’s fine amounts to 100 million, but will be split in two: Google LLC will have to pay 60 million, while Google Ireland Limited will pay the remaining 40 million. This amount is due not only to the infringement itself, but to the fact that the companies sanctioned obtained “significant benefits” derived from the income generated indirectly by the advertising.
Both Google and Amazon will now have to modify the information they provide to their visitors in France within three months. If they do not comply with this requirement, they face an additional penalty of 100,000 euros for each day of delay in implementation. This is also not Google’s first brush with the CNIL, which already sanctioned the search engine in January 2019 for violating the GDPR by obfuscating information on data processing, splitting it into multiple documents to make it difficult to access and understand.